Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35352e302f32342d3234203d3e20323731343139.roa
File:                     3230302e33392e35352e302f32342d3234203d3e20323731343139.roa (raw, json)
Hash identifier:          hbtUVXUPd2AK5AX2x5l/j4y6TCMTUG+KP8k1c5qFg4M=
Subject key identifier:   99:B2:58:95:E4:CD:F1:D1:40:54:34:B6:59:65:C6:65:44:96:09:C4
Certificate issuer:       /CN=913F9BB5F19C9AB91D95AFC628E9A7290E143695
Certificate serial:       355E7A919E538B9BC9287DD264DDFA5867353E61
Authority key identifier: 91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35352e302f32342d3234203d3e20323731343139.roa
Signing time:             Wed 12 Jul 2023 21:00:00 +0000
ROA not before:           Wed 12 Jul 2023 20:55:00 +0000
ROA not after:            Wed 10 Jul 2024 21:00:00 +0000
asID:                     271419
IP address blocks:        200.39.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5e:7a:91:9e:53:8b:9b:c9:28:7d:d2:64:dd:fa:58:67:35:3e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913F9BB5F19C9AB91D95AFC628E9A7290E143695
        Validity
            Not Before: Jul 12 20:55:00 2023 GMT
            Not After : Jul 10 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:30:c0:58:6a:d9:2e:a5:73:7a:0e:34:8d:
                    be:85:54:2a:b1:06:21:dd:92:5e:5e:2a:9b:a6:46:
                    72:21:05:04:fa:d9:87:1c:c0:e9:2c:53:2c:ed:9d:
                    08:19:25:d1:73:02:4b:69:6b:80:05:4f:94:bc:19:
                    89:ad:e8:60:de:ab:05:40:b7:19:9d:e1:fb:c5:cc:
                    46:fb:76:a4:d3:9f:a1:cb:a9:7c:1d:11:b2:c1:df:
                    5f:a9:e4:8c:55:1e:6f:1e:8f:86:fe:9f:cd:82:7f:
                    cd:fb:91:68:fd:56:bb:29:66:d5:b5:fe:8b:d0:d0:
                    fe:14:ff:0c:50:b2:71:b0:c9:0f:85:ca:3d:39:d6:
                    16:ef:0d:ba:6c:cd:02:ad:c6:11:33:6d:7b:2b:0a:
                    2e:d1:e7:33:40:28:ac:47:94:e6:e6:07:09:32:ff:
                    2f:94:94:bd:52:0c:0f:b4:18:f1:fb:10:dc:48:da:
                    57:95:15:71:5e:04:a1:cd:03:e9:f0:69:b9:74:f7:
                    c6:36:b4:34:52:fd:a9:1e:9b:40:ea:26:74:6c:df:
                    2f:55:20:ee:fd:76:81:4a:59:98:9b:33:1c:a8:72:
                    1b:21:ee:0e:78:8f:6f:5e:15:f9:7d:e8:e6:0c:3b:
                    6b:91:d2:ed:d5:19:a4:a5:5c:b8:de:2a:a9:d5:04:
                    ca:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B2:58:95:E4:CD:F1:D1:40:54:34:B6:59:65:C6:65:44:96:09:C4
            X509v3 Authority Key Identifier:
                keyid:91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35352e302f32342d3234203d3e20323731343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:18:7e:64:08:e1:12:ac:b3:4b:ab:1f:44:44:ce:9e:2b:d2:
         ae:10:17:85:82:bb:f5:7a:80:5b:ec:27:d5:64:57:83:8c:17:
         82:f6:5a:86:31:d5:05:28:94:12:a7:02:39:db:57:5f:79:ca:
         f7:01:16:ce:6a:b3:cf:53:db:29:cc:35:68:ea:47:ae:d2:65:
         f8:95:02:ca:38:e2:3f:21:e1:8e:e0:31:6e:c0:c6:05:7e:00:
         f4:e1:7d:d7:ad:12:c2:68:77:a0:71:19:a6:33:2e:30:de:3b:
         3c:a0:29:92:3b:9e:c8:de:bc:48:9d:ed:35:17:36:75:7e:f8:
         0e:73:4c:8f:d4:c5:b5:9f:91:b2:57:b4:6c:18:c7:b2:69:ec:
         8d:e3:f0:2a:6a:5e:3e:47:c8:6b:cb:ba:09:f2:72:bf:87:32:
         0d:ee:44:37:e9:72:37:6e:2a:91:8b:93:fb:c3:3e:74:4a:e0:
         73:3d:f3:df:66:7d:81:d7:d0:a5:48:71:d2:7d:70:44:01:13:
         44:9a:d6:67:5c:e2:1f:36:48:33:2c:c0:a9:a4:e9:7a:f4:22:
         48:1c:a1:5c:19:e5:5c:11:b0:79:3a:44:b6:35:41:77:e7:52:
         8f:1c:73:ed:87:c4:73:c8:f5:ff:40:31:2f:87:83:bc:52:37:
         70:47:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org